This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/z5afGA7OaWu712VRFeG9Gp0k7GU.roa File: z5afGA7OaWu712VRFeG9Gp0k7GU.roa (raw, json) Hash identifier: V5K2iL/FYfaNf2E5t5hua1uBnZXWpXH1Eus7Qaw8bpA= Subject key identifier: CF:96:9F:18:0E:CE:69:6B:BB:D7:65:51:15:E1:BD:1A:9D:24:EC:65 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380FF0D845B5192C6D9E3986E9C825 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/z5afGA7OaWu712VRFeG9Gp0k7GU.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212093 IP address blocks: 45.151.138.0/24 maxlen: 24 194.113.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 13:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0f:f0:d8:45:b5:19:2c:6d:9e:39:86:e9:c8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf969f180ece696bbbd7655115e1bd1a9d24ec65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:e5:3b:e7:fb:38:fa:3e:21:83:0b:b0:4c: c7:8b:c6:8c:04:4b:56:b9:ca:27:2a:c2:e1:ff:7c: 87:1f:55:1e:d6:87:b4:34:44:d3:44:35:70:2f:95: ae:17:99:85:09:f3:d8:11:a8:1d:c7:0f:6d:71:f6: 2e:3b:05:22:cd:53:b7:e3:d7:11:f5:0e:3f:89:bf: 5f:dc:4d:ce:9d:ac:e1:11:df:0e:2e:2b:f2:15:c1: 1b:13:3b:8c:23:b2:7d:dd:67:47:87:6a:d5:94:ba: e2:02:5f:12:ba:41:3c:78:2f:32:f4:01:95:96:dc: a1:6f:d6:19:8a:a8:42:3b:a9:86:b4:bd:c3:bd:9b: 6f:b5:5e:37:4a:65:b2:0f:e4:56:01:bf:f9:a1:a6: e9:ee:9c:00:6b:c9:fa:d4:ab:5d:19:a1:02:3b:52: d8:6f:7b:48:fe:75:50:43:3c:7e:3a:2b:cb:f1:81: b1:c5:e5:66:ad:23:26:8c:ec:5a:b5:96:56:41:70: 7a:c2:7e:35:2a:37:4c:bf:96:8e:9e:c1:ef:04:d7: 7a:15:70:b7:46:7e:83:92:35:af:e2:91:1d:12:46: 4f:e2:c6:0b:90:16:56:31:ac:57:d0:86:b7:e1:40: a0:9d:85:12:dc:5d:62:5a:a0:f9:76:73:58:10:84: df:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:96:9F:18:0E:CE:69:6B:BB:D7:65:51:15:E1:BD:1A:9D:24:EC:65 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/z5afGA7OaWu712VRFeG9Gp0k7GU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.138.0/24 194.113.105.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:2d:9a:db:36:f3:02:73:9f:6a:a9:7d:d8:c4:f9:aa:4e:c0: 56:93:d2:14:3f:1f:c7:b1:3b:44:9a:4c:c7:d2:e8:e4:ef:cb: 04:77:27:6c:61:36:74:62:f7:bb:96:11:e0:d7:cd:20:d2:75: 7b:2b:e0:e4:e8:10:36:5c:66:14:95:51:73:80:35:9e:39:4a: 2f:9e:ad:49:b2:59:c7:0d:f7:96:a7:24:d6:22:94:c6:14:ed: 3b:bd:15:a9:65:1e:56:c1:7f:2b:a6:5b:16:9e:d2:3f:69:41: 13:94:b0:22:77:21:e9:c9:f5:be:46:12:a1:85:d0:28:a1:25: e2:12:78:41:bb:26:ec:b3:35:42:02:e2:eb:af:1a:9f:41:9e: 17:f2:1e:d0:c1:7a:1f:a8:e9:ec:e8:3e:94:31:57:ae:39:ae: 67:09:20:43:0d:4b:e1:18:f4:87:70:a1:2f:c4:7a:c4:06:26: cc:e4:31:60:72:7e:3f:9f:1d:7c:22:e0:bb:3e:e1:41:7b:d1: 5c:d1:32:ff:2c:77:d9:c2:9d:e1:df:8d:bd:e4:e8:43:de:d4: aa:4b:76:94:33:8f:02:f6:6b:4d:2f:34:5a:e9:d3:3d:2b:e5: 7b:a4:a4:c6:e3:19:a5:e0:a3:f9:01:d4:d6:65:11:72:81:d7: 2f:12:41:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OA/w2EW1GSxtnjmG6cglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjk2OWYxODBlY2U2OTZiYmJkNzY1NTExNWUxYmQxYTlkMjRlYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j3lO+f7OPo+IYMLsEzHi8aMBEtW uconKsLh/3yHH1Ue1oe0NETTRDVwL5WuF5mFCfPYEagdxw9tcfYuOwUizVO349cR 9Q4/ib9f3E3OnazhEd8OLivyFcEbEzuMI7J93WdHh2rVlLriAl8SukE8eC8y9AGV ltyhb9YZiqhCO6mGtL3DvZtvtV43SmWyD+RWAb/5oabp7pwAa8n61KtdGaECO1LY b3tI/nVQQzx+OivL8YGxxeVmrSMmjOxatZZWQXB6wn41KjdMv5aOnsHvBNd6FXC3 Rn6DkjWv4pEdEkZP4sYLkBZWMaxX0Ia34UCgnYUS3F1iWqD5dnNYEITfWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM+WnxgOzmlru9dlURXhvRqdJOxlMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvejVhZkdBN09hV3U3MTJWUkZlRzlHcDBrN0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZeKAwQA wnFpMA0GCSqGSIb3DQEBCwUAA4IBAQBLLZrbNvMCc59qqX3YxPmqTsBWk9IUPx/H sTtEmkzH0ujk78sEdydsYTZ0Yve7lhHg180g0nV7K+Dk6BA2XGYUlVFzgDWeOUov nq1JslnHDfeWpyTWIpTGFO07vRWpZR5WwX8rplsWntI/aUETlLAidyHpyfW+RhKh hdAooSXiEnhBuybsszVCAuLrrxqfQZ4X8h7QwXofqOns6D6UMVeuOa5nCSBDDUvh GPSHcKEvxHrEBibM5DFgcn4/nx18IuC7PuFBe9Fc0TL/LHfZwp3h34295OhD3tSq S3aUM48C9mtNLzRa6dM9K+V7pKTG4xml4KP5AdTWZRFygdcvEkG2 -----END CERTIFICATE-----Generated at Tue Jan 20 17:06:31 2026 by rpki-client